One thing sure is that more and more DAC will come out in future,but there is a potential security issue that the more times we import the AGS private key to claim the corresponding shares in the DAC,the more risk the private key might be exposed,under the current social contract without AGS Liquid,we even cannot transfer the AGS shares to other address if the private key exposed,is there any consideration or plan to improve the AGS security,please discuss.

     root
      / \
   A      B
  / \    / \
 t1 t2 t3 t4


A=hash(t1,t2)
B=hash(t3,t4)
Root=hash(A,B)

presented above is the typical merkle tree algorithm, but seems the merkle  tree algorithm in bitshares toolkit is simplified as below(if i my understanding is not wrong),what is the purpose?is it still work properly after simplified ?and any benefit from the simplification?

A=hash(t2)
B=hash(t4)
Root=hash(B)

as we know,the genisis.json is generated from third party tool, how can we verify if the bts allocation in genesis.json which used to initial the bts genesis block is correct and not manually modified.